Published: 10/01/2020 Updated: 07/11/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Use after free in media picker in Google Chrome before 79.0.3945.88 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

Vulnerable Product	Search on Vulmon	Subscribe to Product
google chrome
debian debian linux 9.0
debian debian linux 10.0
fedoraproject fedora 30
opensuse backports sle 15.0

Synopsis Important: chromium-browser security update Type/Severity Security Advisory: Important Topic An update for chromium-browser is now available for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability S ...

Several vulnerabilities have been discovered in the chromium web browser CVE-2019-13725 Gengming Liu and Jianyu Chen discovered a use-after-free issue in the bluetooth implementation CVE-2019-13726 Sergei Glazunov discovered a buffer overflow issue CVE-2019-13727 @piochu discovered a policy enforcement error CVE-2019-13728 ...

A use-after-free vulnerability has been found in the media picker component of the chromium browser before 790394588 ...

The stable channel has been updated to 790394588 for Windows, Mac, and Linux, which will roll out over the coming days/weeks A list of all changes is available in the log Interested in switching release channels? Find out how If you find a new issue, please let us know by filing a bug The community help forum is also a great place ...

CWE-787 CWE-416 https://crbug.com/1031653 https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop_17.html http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00005.html https://seclists.org/bugtraq/2020/Jan/27 https://www.debian.org/security/2020/dsa-4606 http://packetstormsecurity.com/files/156563/Chrome-DesktopMediaPickerController-WebContentsDestroyed-Use-After-Free.html https://security.gentoo.org/glsa/202003-08 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N5CIQCVS6E3ULJCNU7YJXJPO2BLQZDTK/https://access.redhat.com/errata/RHSA-2020:0005 https://nvd.nist.gov https://www.debian.org/security/2020/dsa-4606

CVE-2019-13767

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect